@opensoha/contracts 0.1.19 → 0.1.21

package/gen/go/sohaapi/types.go

@@ -4340,6 +4340,39 @@ func (e KubernetesAccessReviewSubjectKind) Valid() bool {
 	}
 }
 
+// Defines values for KubernetesAgentCustomResourceRuleVerbs.
+const (
+	KubernetesAgentCustomResourceRuleVerbsCreate KubernetesAgentCustomResourceRuleVerbs = "create"
+	KubernetesAgentCustomResourceRuleVerbsDelete KubernetesAgentCustomResourceRuleVerbs = "delete"
+	KubernetesAgentCustomResourceRuleVerbsGet    KubernetesAgentCustomResourceRuleVerbs = "get"
+	KubernetesAgentCustomResourceRuleVerbsList   KubernetesAgentCustomResourceRuleVerbs = "list"
+	KubernetesAgentCustomResourceRuleVerbsPatch  KubernetesAgentCustomResourceRuleVerbs = "patch"
+	KubernetesAgentCustomResourceRuleVerbsUpdate KubernetesAgentCustomResourceRuleVerbs = "update"
+	KubernetesAgentCustomResourceRuleVerbsWatch  KubernetesAgentCustomResourceRuleVerbs = "watch"
+)
+
+// Valid indicates whether the value is a known member of the KubernetesAgentCustomResourceRuleVerbs enum.
+func (e KubernetesAgentCustomResourceRuleVerbs) Valid() bool {
+	switch e {
+	case KubernetesAgentCustomResourceRuleVerbsCreate:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsDelete:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsGet:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsList:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsPatch:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsUpdate:
+		return true
+	case KubernetesAgentCustomResourceRuleVerbsWatch:
+		return true
+	default:
+		return false
+	}
+}
+
 // Defines values for KubernetesConnectionMode.
 const (
 	KubernetesConnectionModeAgent            KubernetesConnectionMode = "agent"
@@ -4421,6 +4454,24 @@ func (e KubernetesImportedTargetWorkloadKind) Valid() bool {
 	}
 }
 
+// Defines values for KubernetesPrometheusTransport.
+const (
+	Agent  KubernetesPrometheusTransport = "agent"
+	Direct KubernetesPrometheusTransport = "direct"
+)
+
+// Valid indicates whether the value is a known member of the KubernetesPrometheusTransport enum.
+func (e KubernetesPrometheusTransport) Valid() bool {
+	switch e {
+	case Agent:
+		return true
+	case Direct:
+		return true
+	default:
+		return false
+	}
+}
+
 // Defines values for KubernetesRelatedResourceKind.
 const (
 	KubernetesRelatedResourceKindHorizontalPodAutoscaler KubernetesRelatedResourceKind = "HorizontalPodAutoscaler"
@@ -6769,6 +6820,7 @@ const (
 	NetworkRuntimeKindEndpoint NetworkRuntimeKind = "endpoint"
 	NetworkRuntimeKindGateway  NetworkRuntimeKind = "gateway"
 	NetworkRuntimeKindNAS      NetworkRuntimeKind = "nas"
+	NetworkRuntimeKindProxy    NetworkRuntimeKind = "proxy"
 )
 
 // Valid indicates whether the value is a known member of the NetworkRuntimeKind enum.
@@ -6780,6 +6832,8 @@ func (e NetworkRuntimeKind) Valid() bool {
 		return true
 	case NetworkRuntimeKindNAS:
 		return true
+	case NetworkRuntimeKindProxy:
+		return true
 	default:
 		return false
 	}
@@ -17945,6 +17999,19 @@ type KubernetesAdmissionWebhookRule struct {
 	Scope       string   `json:"scope,omitempty"`
 }
 
+// KubernetesAgentCustomResourceRule defines model for KubernetesAgentCustomResourceRule.
+type KubernetesAgentCustomResourceRule struct {
+	APIGroup string `json:"apiGroup"`
+
+	// Namespaces Explicit namespaces; omitted or empty grants cluster-wide access to the named resources only.
+	Namespaces []string                                 `json:"namespaces,omitempty"`
+	Resources  []string                                 `json:"resources"`
+	Verbs      []KubernetesAgentCustomResourceRuleVerbs `json:"verbs"`
+}
+
+// KubernetesAgentCustomResourceRuleVerbs defines model for KubernetesAgentCustomResourceRule.Verbs.
+type KubernetesAgentCustomResourceRuleVerbs string
+
 // KubernetesBackendTLSPolicy defines model for KubernetesBackendTLSPolicy.
 type KubernetesBackendTLSPolicy struct {
 	AgeSeconds              int64    `json:"ageSeconds"`
@@ -17993,15 +18060,16 @@ type KubernetesCacheResourceDiagnostic struct {
 
 // KubernetesClusterConnectionDetail defines model for KubernetesClusterConnectionDetail.
 type KubernetesClusterConnectionDetail struct {
-	Context             string                   `json:"context,omitempty"`
-	CredentialType      string                   `json:"credentialType"`
-	Endpoint            string                   `json:"endpoint,omitempty"`
-	HasInlineKubeconfig bool                     `json:"hasInlineKubeconfig"`
-	HasToken            bool                     `json:"hasToken"`
-	Mode                KubernetesConnectionMode `json:"mode"`
-	SourceRef           string                   `json:"sourceRef,omitempty"`
-	SourceType          string                   `json:"sourceType"`
-	UsesInformerCache   bool                     `json:"usesInformerCache"`
+	Context             string                              `json:"context,omitempty"`
+	CredentialType      string                              `json:"credentialType"`
+	CustomResourceRules []KubernetesAgentCustomResourceRule `json:"customResourceRules,omitempty"`
+	Endpoint            string                              `json:"endpoint,omitempty"`
+	HasInlineKubeconfig bool                                `json:"hasInlineKubeconfig"`
+	HasToken            bool                                `json:"hasToken"`
+	Mode                KubernetesConnectionMode            `json:"mode"`
+	SourceRef           string                              `json:"sourceRef,omitempty"`
+	SourceType          string                              `json:"sourceType"`
+	UsesInformerCache   bool                                `json:"usesInformerCache"`
 }
 
 // KubernetesClusterDetail defines model for KubernetesClusterDetail.
@@ -18240,16 +18308,18 @@ type KubernetesCustomResource struct {
 
 // KubernetesCustomResourceDefinition defines model for KubernetesCustomResourceDefinition.
 type KubernetesCustomResourceDefinition struct {
-	AgeSeconds     int64    `json:"ageSeconds"`
-	AllowedActions []string `json:"allowedActions,omitempty"`
-	CreatedAt      string   `json:"createdAt,omitempty"`
-	Group          string   `json:"group"`
-	Kind           string   `json:"kind"`
-	Name           string   `json:"name"`
-	Plural         string   `json:"plural"`
-	Scope          string   `json:"scope"`
-	Version        string   `json:"version,omitempty"`
-	Versions       []string `json:"versions,omitempty"`
+	AgeSeconds     int64      `json:"ageSeconds"`
+	AllowedActions []string   `json:"allowedActions,omitempty"`
+	CreatedAt      string     `json:"createdAt,omitempty"`
+	DeletingAt     *time.Time `json:"deletingAt,omitempty"`
+	Group          string     `json:"group"`
+	Kind           string     `json:"kind"`
+	Name           string     `json:"name"`
+	Plural         string     `json:"plural"`
+	Scope          string     `json:"scope"`
+	UID            string     `json:"uid,omitempty"`
+	Version        string     `json:"version,omitempty"`
+	Versions       []string   `json:"versions,omitempty"`
 }
 
 // KubernetesCustomResourceDefinitionListEnvelope defines model for KubernetesCustomResourceDefinitionListEnvelope.
@@ -19642,12 +19712,16 @@ type KubernetesPriorityClassListEnvelope struct {
 
 // KubernetesPrometheusDetail defines model for KubernetesPrometheusDetail.
 type KubernetesPrometheusDetail struct {
-	BaseURL        string `json:"baseUrl,omitempty"`
-	ClusterLabel   string `json:"clusterLabel,omitempty"`
-	GrafanaBaseURL string `json:"grafanaBaseUrl,omitempty"`
-	HasBearerToken bool   `json:"hasBearerToken"`
+	BaseURL        string                        `json:"baseUrl,omitempty"`
+	ClusterLabel   string                        `json:"clusterLabel,omitempty"`
+	GrafanaBaseURL string                        `json:"grafanaBaseUrl,omitempty"`
+	HasBearerToken bool                          `json:"hasBearerToken"`
+	Transport      KubernetesPrometheusTransport `json:"transport,omitempty"`
 }
 
+// KubernetesPrometheusTransport defines model for KubernetesPrometheusTransport.
+type KubernetesPrometheusTransport string
+
 // KubernetesReferenceGrant defines model for KubernetesReferenceGrant.
 type KubernetesReferenceGrant struct {
 	AgeSeconds     int64    `json:"ageSeconds"`
@@ -23031,7 +23105,7 @@ type NetworkRuntimeEnrollmentEnvelope struct {
 	Data NetworkRuntimeEnrollment `json:"data"`
 }
 
-// NetworkRuntimeEnrollmentInput defines model for NetworkRuntimeEnrollmentInput.
+// NetworkRuntimeEnrollmentInput For proxy runtimes, runtimeId identifies an existing proxy instance and deviceId and subjectId must equal runtimeId.
 type NetworkRuntimeEnrollmentInput struct {
 	DeviceID    string             `json:"deviceId"`
 	RuntimeID   string             `json:"runtimeId"`
@@ -39916,3 +39990,27 @@ const ListAIGatewayRelayUpstreamsParamsStatusDegraded ListAIGatewayRelayUpstream
 
 // Deprecated: retained for Go SDK source compatibility.
 const ListAIGatewayRelayUpstreamsParamsStatusDisabled ListAIGatewayRelayUpstreamsParamsStatus = "disabled"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeNetworkNamespace RuntimeNetworkUsageScope = "network_namespace"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeProcess RuntimeNetworkUsageScope = "process"
+
+// Deprecated: retained for Go SDK source compatibility.
+const RuntimeNetworkUsageScopeUnavailable RuntimeNetworkUsageScope = "unavailable"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusCancelled WorkbenchAgentStatusEventStatus = "cancelled"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusFailed WorkbenchAgentStatusEventStatus = "failed"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusQueued WorkbenchAgentStatusEventStatus = "queued"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusRunning WorkbenchAgentStatusEventStatus = "running"
+
+// Deprecated: retained for Go SDK source compatibility.
+const WorkbenchAgentStatusEventStatusSucceeded WorkbenchAgentStatusEventStatus = "succeeded"

package/gen/ts/sohaapi/index.ts

@@ -19567,12 +19567,64 @@ export interface components {
             hasInlineKubeconfig: boolean;
             hasToken: boolean;
             usesInformerCache: boolean;
+            customResourceRules?: components["schemas"]["KubernetesAgentCustomResourceRule"][];
+        };
+        KubernetesCustomResourceAccess: {
+            allowedActions: ("list" | "view" | "create" | "update" | "delete")[];
+        };
+        KubernetesCustomResourceAccessEnvelope: {
+            data: components["schemas"]["KubernetesCustomResourceAccess"];
+        };
+        KubernetesClusterRegistrationRequest: {
+            id?: string;
+            name?: string;
+            region?: string;
+            environment?: string;
+            labels?: {
+                [key: string]: string;
+            };
+            connectionMode?: components["schemas"]["KubernetesConnectionMode"];
+            kubeconfig?: string;
+            context?: string;
+            agentEndpoint?: string;
+            agentToken?: string;
+            prometheusBaseUrl?: string;
+            prometheusBearerToken?: string;
+            prometheusClusterLabel?: string;
+            grafanaBaseUrl?: string;
+            prometheusTransport?: components["schemas"]["KubernetesPrometheusTransport"];
+            agentCustomResourceRules?: components["schemas"]["KubernetesAgentCustomResourceRule"][];
+        };
+        KubernetesAgentCustomResourceRule: {
+            apiGroup: string;
+            resources: string[];
+            verbs: ("get" | "list" | "watch" | "create" | "update" | "patch" | "delete")[];
+            /** @description Explicit namespaces; omitted or empty grants cluster-wide access to the named resources only. */
+            namespaces?: string[];
+        };
+        /**
+         * @default direct
+         * @enum {string}
+         */
+        KubernetesPrometheusTransport: "direct" | "agent";
+        /** @description Range queries require start, end and step. The runtime also enforces end greater than start, a maximum 24-hour range and at most 11000 intervals. */
+        AgentPrometheusQueryRequest: {
+            endpoint: string;
+            query: string;
+            /** @enum {string} */
+            kind: "instant" | "range";
+            /** Format: int64 */
+            start?: number;
+            /** Format: int64 */
+            end?: number;
+            step?: number;
         };
         KubernetesPrometheusDetail: {
             baseUrl?: string;
             clusterLabel?: string;
             grafanaBaseUrl?: string;
             hasBearerToken: boolean;
+            transport?: components["schemas"]["KubernetesPrometheusTransport"];
         };
         KubernetesMonitoringDetail: {
             prometheus: components["schemas"]["KubernetesPrometheusDetail"];
@@ -20256,6 +20308,62 @@ export interface components {
         KubernetesConfigMapListEnvelope: {
             items: components["schemas"]["KubernetesConfigMap"][];
         };
+        KubernetesNamespaceInput: {
+            name?: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesNamespaceCreateInput: {
+            name: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesNamespaceEnvelope: {
+            data: components["schemas"]["KubernetesNamespace"];
+        };
+        KubernetesNodeUpdateInput: {
+            labels?: components["schemas"]["KubernetesStringMap"];
+            taints?: components["schemas"]["KubernetesNodeTaint"][];
+        };
+        KubernetesNodeSchedulabilityInput: {
+            unschedulable: boolean;
+        };
+        KubernetesNodeDrainInput: {
+            force?: boolean;
+            deleteEmptyDirData?: boolean;
+            /** @default 300 */
+            timeoutSeconds?: number;
+        };
+        KubernetesResourceYamlInput: {
+            content: string;
+        };
+        KubernetesConfigMapDataInput: {
+            data?: components["schemas"]["KubernetesStringMap"];
+            binaryData?: components["schemas"]["KubernetesStringMap"];
+        };
+        /** @description Data values are plain text. The response detail returns Kubernetes Base64-encoded values. */
+        KubernetesSecretDataInput: {
+            data?: components["schemas"]["KubernetesStringMap"];
+        };
+        KubernetesCronJobSuspendInput: {
+            suspend: boolean;
+        };
+        KubernetesSecretDetail: {
+            name: string;
+            namespace: string;
+            labels?: components["schemas"]["KubernetesStringMap"];
+            annotations?: components["schemas"]["KubernetesStringMap"];
+            /** @description Secret data values encoded with standard Base64. Requires secret-data.view. */
+            data?: components["schemas"]["KubernetesStringMap"];
+            immutable: boolean;
+            createdAt?: string;
+            /** Format: int64 */
+            ageSeconds: number;
+            type: string;
+        };
+        KubernetesSecretDetailEnvelope: {
+            data: components["schemas"]["KubernetesSecretDetail"];
+        };
         KubernetesConfigMapDetail: {
             name: string;
             namespace: string;
@@ -21275,6 +21383,9 @@ export interface components {
             data: components["schemas"]["KubernetesIngressClassDetail"];
         };
         KubernetesCustomResourceDefinition: {
+            uid?: string;
+            /** Format: date-time */
+            deletingAt?: string;
             name: string;
             group: string;
             scope: string;
@@ -21662,6 +21773,32 @@ export interface components {
         PlatformOperationSummaryEnvelope: {
             data: components["schemas"]["PlatformOperationSummary"];
         };
+        ClusterAgentUpgradeInput: {
+            /** @description Explicit stable official Agent version, such as v0.1.7. Registry and container identity cannot be overridden. */
+            version: string;
+        };
+        ClusterAgentUpgradeStatus: {
+            /** @description Version reported by the currently connected Agent process. */
+            version: string;
+            /** @description Desired image of the standard Agent Deployment. */
+            image: string;
+            /** @description Agent version bundled with this Core release. */
+            recommendedVersion: string;
+            rolloutStatus: string;
+            message: string;
+            canUpgrade: boolean;
+            upgradeDisabledReason?: string;
+        };
+        ClusterAgentUpgradeStatusEnvelope: {
+            data: components["schemas"]["ClusterAgentUpgradeStatus"];
+        };
+        ClusterAgentUpgradeResult: {
+            previousImage: string;
+            targetImage: string;
+        };
+        ClusterAgentUpgradeResultEnvelope: {
+            data: components["schemas"]["ClusterAgentUpgradeResult"];
+        };
         AgentInstallation: {
             clusterId: string;
             /** Format: uri */
@@ -25555,9 +25692,101 @@ export interface components {
             items: components["schemas"]["NetworkSiteProfileBinding"][];
         };
         /** @enum {string} */
-        NetworkRuntimeKind: "endpoint" | "gateway" | "nas";
+        NetworkProxyEngine: "mihomo" | "sing-box" | "v2ray";
+        NetworkProxyInstanceInput: {
+            id: string;
+            name: string;
+            engine: components["schemas"]["NetworkProxyEngine"];
+            host?: string;
+        };
+        /** @enum {string} */
+        NetworkProxyInstanceStatus: "unregistered" | "online" | "degraded" | "offline" | "disabled";
+        /** @enum {string} */
+        NetworkProxyCapability: "traffic" | "connections" | "close_connection";
+        NetworkProxyInstance: {
+            id: string;
+            name: string;
+            engine: components["schemas"]["NetworkProxyEngine"];
+            enabled: boolean;
+            host?: string;
+            engineVersion?: string;
+            status: components["schemas"]["NetworkProxyInstanceStatus"];
+            capabilities: components["schemas"]["NetworkProxyCapability"][];
+            /** Format: int64 */
+            desiredRevision: number;
+            /** Format: int64 */
+            observedRevision: number;
+            /** Format: date-time */
+            lastSeenAt?: string;
+            /** Format: date-time */
+            lastSampleAt?: string;
+            reasonCode?: string;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        NetworkProxyInstanceEnvelope: {
+            data: components["schemas"]["NetworkProxyInstance"];
+        };
+        NetworkProxyInstanceListEnvelope: {
+            items: components["schemas"]["NetworkProxyInstance"][];
+        };
+        NetworkProxyConfigurationInput: {
+            /** Format: int64 */
+            expectedRevision: number;
+            enabled: boolean;
+            /** Format: password */
+            content: string;
+        };
+        NetworkProxyTrafficSample: {
+            /** Format: date-time */
+            observedAt: string;
+            /** Format: int64 */
+            uploadTotal: number;
+            /** Format: int64 */
+            downloadTotal: number;
+            uploadBytesPerSecond: number;
+            downloadBytesPerSecond: number;
+            activeConnections?: number;
+        };
+        NetworkProxyTrafficEnvelope: {
+            instanceId: string;
+            supported: boolean;
+            samples: components["schemas"]["NetworkProxyTrafficSample"][];
+        };
+        NetworkProxyConnection: {
+            id: string;
+            destination: string;
+            /** @enum {string} */
+            network: "tcp" | "udp" | "other";
+            /** Format: int64 */
+            uploadBytes: number;
+            /** Format: int64 */
+            downloadBytes: number;
+            /** Format: date-time */
+            startedAt?: string;
+        };
+        NetworkProxyConnectionsEnvelope: {
+            instanceId: string;
+            /** @enum {string} */
+            state: "available" | "unsupported" | "unavailable";
+            /** Format: date-time */
+            observedAt?: string;
+            connections: components["schemas"]["NetworkProxyConnection"][];
+        };
+        NetworkProxyCloseCommandEnvelope: {
+            commandId: string;
+            /** @enum {string} */
+            status: "pending" | "closed" | "not-found" | "failed" | "expired";
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        /** @enum {string} */
+        NetworkRuntimeKind: "endpoint" | "gateway" | "nas" | "proxy";
         /** @enum {string} */
         NetworkRuntimeEnrollmentStatus: "pending" | "consumed" | "revoked";
+        /** @description For proxy runtimes, runtimeId identifies an existing proxy instance and deviceId and subjectId must equal runtimeId. */
         NetworkRuntimeEnrollmentInput: {
             runtimeId: string;
             runtimeKind: components["schemas"]["NetworkRuntimeKind"];
@@ -27117,6 +27346,12 @@ export type KubernetesClusterListEnvelope = components['schemas']['KubernetesClu
 export type KubernetesCacheResourceDiagnostic = components['schemas']['KubernetesCacheResourceDiagnostic'];
 export type KubernetesClusterDiagnostics = components['schemas']['KubernetesClusterDiagnostics'];
 export type KubernetesClusterConnectionDetail = components['schemas']['KubernetesClusterConnectionDetail'];
+export type KubernetesCustomResourceAccess = components['schemas']['KubernetesCustomResourceAccess'];
+export type KubernetesCustomResourceAccessEnvelope = components['schemas']['KubernetesCustomResourceAccessEnvelope'];
+export type KubernetesClusterRegistrationRequest = components['schemas']['KubernetesClusterRegistrationRequest'];
+export type KubernetesAgentCustomResourceRule = components['schemas']['KubernetesAgentCustomResourceRule'];
+export type KubernetesPrometheusTransport = components['schemas']['KubernetesPrometheusTransport'];
+export type AgentPrometheusQueryRequest = components['schemas']['AgentPrometheusQueryRequest'];
 export type KubernetesPrometheusDetail = components['schemas']['KubernetesPrometheusDetail'];
 export type KubernetesMonitoringDetail = components['schemas']['KubernetesMonitoringDetail'];
 export type KubernetesClusterDetail = components['schemas']['KubernetesClusterDetail'];
@@ -27197,6 +27432,18 @@ export type KubernetesReplicationControllerDetail = components['schemas']['Kuber
 export type KubernetesReplicationControllerDetailEnvelope = components['schemas']['KubernetesReplicationControllerDetailEnvelope'];
 export type KubernetesConfigMap = components['schemas']['KubernetesConfigMap'];
 export type KubernetesConfigMapListEnvelope = components['schemas']['KubernetesConfigMapListEnvelope'];
+export type KubernetesNamespaceInput = components['schemas']['KubernetesNamespaceInput'];
+export type KubernetesNamespaceCreateInput = components['schemas']['KubernetesNamespaceCreateInput'];
+export type KubernetesNamespaceEnvelope = components['schemas']['KubernetesNamespaceEnvelope'];
+export type KubernetesNodeUpdateInput = components['schemas']['KubernetesNodeUpdateInput'];
+export type KubernetesNodeSchedulabilityInput = components['schemas']['KubernetesNodeSchedulabilityInput'];
+export type KubernetesNodeDrainInput = components['schemas']['KubernetesNodeDrainInput'];
+export type KubernetesResourceYamlInput = components['schemas']['KubernetesResourceYamlInput'];
+export type KubernetesConfigMapDataInput = components['schemas']['KubernetesConfigMapDataInput'];
+export type KubernetesSecretDataInput = components['schemas']['KubernetesSecretDataInput'];
+export type KubernetesCronJobSuspendInput = components['schemas']['KubernetesCronJobSuspendInput'];
+export type KubernetesSecretDetail = components['schemas']['KubernetesSecretDetail'];
+export type KubernetesSecretDetailEnvelope = components['schemas']['KubernetesSecretDetailEnvelope'];
 export type KubernetesConfigMapDetail = components['schemas']['KubernetesConfigMapDetail'];
 export type KubernetesConfigMapDetailEnvelope = components['schemas']['KubernetesConfigMapDetailEnvelope'];
 export type KubernetesSecretMetadata = components['schemas']['KubernetesSecretMetadata'];
@@ -27369,6 +27616,11 @@ export type PlatformOperationLog = components['schemas']['PlatformOperationLog']
 export type PlatformOperationLogListEnvelope = components['schemas']['PlatformOperationLogListEnvelope'];
 export type PlatformOperationSummary = components['schemas']['PlatformOperationSummary'];
 export type PlatformOperationSummaryEnvelope = components['schemas']['PlatformOperationSummaryEnvelope'];
+export type ClusterAgentUpgradeInput = components['schemas']['ClusterAgentUpgradeInput'];
+export type ClusterAgentUpgradeStatus = components['schemas']['ClusterAgentUpgradeStatus'];
+export type ClusterAgentUpgradeStatusEnvelope = components['schemas']['ClusterAgentUpgradeStatusEnvelope'];
+export type ClusterAgentUpgradeResult = components['schemas']['ClusterAgentUpgradeResult'];
+export type ClusterAgentUpgradeResultEnvelope = components['schemas']['ClusterAgentUpgradeResultEnvelope'];
 export type AgentInstallation = components['schemas']['AgentInstallation'];
 export type AgentInstallationEnvelope = components['schemas']['AgentInstallationEnvelope'];
 export type DockerHostAgentInstallation = components['schemas']['DockerHostAgentInstallation'];
@@ -27846,6 +28098,19 @@ export type NetworkSiteProfileBindingInput = components['schemas']['NetworkSiteP
 export type NetworkSiteProfileBinding = components['schemas']['NetworkSiteProfileBinding'];
 export type NetworkSiteProfileBindingEnvelope = components['schemas']['NetworkSiteProfileBindingEnvelope'];
 export type NetworkSiteProfileBindingListEnvelope = components['schemas']['NetworkSiteProfileBindingListEnvelope'];
+export type NetworkProxyEngine = components['schemas']['NetworkProxyEngine'];
+export type NetworkProxyInstanceInput = components['schemas']['NetworkProxyInstanceInput'];
+export type NetworkProxyInstanceStatus = components['schemas']['NetworkProxyInstanceStatus'];
+export type NetworkProxyCapability = components['schemas']['NetworkProxyCapability'];
+export type NetworkProxyInstance = components['schemas']['NetworkProxyInstance'];
+export type NetworkProxyInstanceEnvelope = components['schemas']['NetworkProxyInstanceEnvelope'];
+export type NetworkProxyInstanceListEnvelope = components['schemas']['NetworkProxyInstanceListEnvelope'];
+export type NetworkProxyConfigurationInput = components['schemas']['NetworkProxyConfigurationInput'];
+export type NetworkProxyTrafficSample = components['schemas']['NetworkProxyTrafficSample'];
+export type NetworkProxyTrafficEnvelope = components['schemas']['NetworkProxyTrafficEnvelope'];
+export type NetworkProxyConnection = components['schemas']['NetworkProxyConnection'];
+export type NetworkProxyConnectionsEnvelope = components['schemas']['NetworkProxyConnectionsEnvelope'];
+export type NetworkProxyCloseCommandEnvelope = components['schemas']['NetworkProxyCloseCommandEnvelope'];
 export type NetworkRuntimeKind = components['schemas']['NetworkRuntimeKind'];
 export type NetworkRuntimeEnrollmentStatus = components['schemas']['NetworkRuntimeEnrollmentStatus'];
 export type NetworkRuntimeEnrollmentInput = components['schemas']['NetworkRuntimeEnrollmentInput'];

package/go.mod

@@ -3,10 +3,12 @@ module github.com/opensoha/soha-contracts
 go 1.26.6
 
 require (
+	github.com/google/uuid v1.6.0
 	github.com/oapi-codegen/runtime v1.4.2
 	github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
 	go.yaml.in/yaml/v3 v3.0.4
 	helm.sh/helm/v4 v4.1.4
+	k8s.io/api v0.35.1
 	k8s.io/apimachinery v0.35.1
 	k8s.io/cli-runtime v0.35.1
 	k8s.io/client-go v0.35.1
@@ -49,7 +51,6 @@ require (
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/gnostic-models v0.7.0 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/uuid v1.6.0 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
 	github.com/huandu/xstrings v1.5.0 // indirect
@@ -93,7 +94,7 @@ require (
 	golang.org/x/crypto v0.51.0 // indirect
 	golang.org/x/net v0.55.0 // indirect
 	golang.org/x/oauth2 v0.34.0 // indirect
-	golang.org/x/sync v0.21.0 // indirect
+	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.45.0 // indirect
 	golang.org/x/term v0.43.0 // indirect
 	golang.org/x/text v0.39.0 // indirect
@@ -102,7 +103,6 @@ require (
 	gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/api v0.35.1 // indirect
 	k8s.io/apiextensions-apiserver v0.35.1 // indirect
 	k8s.io/apiserver v0.35.1 // indirect
 	k8s.io/component-base v0.35.1 // indirect
@@ -110,7 +110,7 @@ require (
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	k8s.io/kubectl v0.35.1 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
-	oras.land/oras-go/v2 v2.6.0 // indirect
+	oras.land/oras-go/v2 v2.6.2 // indirect
 	sigs.k8s.io/controller-runtime v0.23.1 // indirect
 	sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
 	sigs.k8s.io/kustomize/api v0.21.1 // indirect

package/go.sum

@@ -333,8 +333,8 @@ golang.org/x/net v0.55.0 h1:bcvxaJn3e1U6InsFWt1JUq1aSjnRxLzT2rtD2KfkDF8=
 golang.org/x/net v0.55.0/go.mod h1:L5U2KuzuOe1lY7Z+aWVIKK6qEeJXnXV9yzGA+WCHJww=
 golang.org/x/oauth2 v0.34.0 h1:hqK/t4AKgbqWkdkcAeI8XLmbK+4m4G5YeQRrmiotGlw=
 golang.org/x/oauth2 v0.34.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA=
-golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=
-golang.org/x/sync v0.21.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
+golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY=
@@ -391,8 +391,8 @@ k8s.io/kubectl v0.35.1 h1:zP3Er8C5i1dcAFUMh9Eva0kVvZHptXIn/+8NtRWMxwg=
 k8s.io/kubectl v0.35.1/go.mod h1:cQ2uAPs5IO/kx8R5s5J3Ihv3VCYwrx0obCXum0CvnXo=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzkbzn+gDM4X9T4Ck=
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
-oras.land/oras-go/v2 v2.6.0 h1:X4ELRsiGkrbeox69+9tzTu492FMUu7zJQW6eJU+I2oc=
-oras.land/oras-go/v2 v2.6.0/go.mod h1:magiQDfG6H1O9APp+rOsvCPcW1GD2MM7vgnKY0Y+u1o=
+oras.land/oras-go/v2 v2.6.2 h1:N04RXngAp1LJKTG6ifz3xHPipasEkWr+hFmInja5YKo=
+oras.land/oras-go/v2 v2.6.2/go.mod h1:PlTtg4JTDJkDe8yVHpM2wz7/YDc00GVas+i4jAW2TZ4=
 sigs.k8s.io/controller-runtime v0.23.1 h1:TjJSM80Nf43Mg21+RCy3J70aj/W6KyvDtOlpKf+PupE=
 sigs.k8s.io/controller-runtime v0.23.1/go.mod h1:B6COOxKptp+YaUT5q4l6LqUJTRpizbgf9KSRNdQGns0=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=

package/network/README.md

@@ -4,6 +4,18 @@ The JSON Schemas in this directory define strict serialized shapes. Every
 consumer must also enforce the cross-field rules below before using a message
 for authorization, routing, firewall configuration or accounting.
 
+## Server proxy telemetry
+
+- A Linux proxy runtime uses a separate `network-ingest/proxy/{instanceId}`
+  certificate to submit `proxy.runtime.sample`; its control certificate cannot
+  be used for ingest. The authenticated producer ID is the managed instance ID.
+- Each event records sampled cumulative bytes and process uptime at
+  `occurredAt`. Readers derive rates only between samples from the same process
+  lifetime with nondecreasing counters. A process restart starts a new series.
+- The existing `proxy.flow.aggregate` remains an endpoint Mihomo profile
+  window and is not a server instance sample. Neither event authorizes access
+  or exposes individual connections.
+
 ## Runtime messages
 
 - Runtime mTLS certificates carry exactly one Soha URI SAN: